Minor fixes to Facebook widget plugin for SSL

Facebook forces SSL so linking the iframe to http:// causes and unnecessary redirect to https://