use secure domain for bookmarklet
Merge branch 'master' into heroku-edition

* master:
  use secure domain for bookmarklet