allow https for youtube and sf videos