Do not force http here, it can be iframed from https