changed from http:// to // so it works when https is forced