use https for the bookmarklet