secure urls for flags and drop downs