Use window.open to make it work w/ https