dont hardcode http://

chrome (and other browsers probably) will block elements loaded from http on an https site