drawer: fix "browse more" card:// redirect

Note, HOSTNAME is now HOST, with the fully qualified host (including port)
This is the big logic change here, unsure of why it was checking isRootPath() to begin with