- commented out <html:base> tag so relative URLs for css/js work under https on begin page (also somewhat insecure)