use https instead of http; less browser warnings