use correct vimeo embedding

vimeo embedding on secure sites has changed, there is now a single URL for all protocols, so the baseUrl just needs to be protocol-relative and point to the player