add @includes for https URLs; use protocol-relative urls (//) everywhere
add @exclude for registration page (workaround for "wrong code" bug)