update with newer version of jquery, loaded without CDN
re-add protocol for non-potentially https hosts