changed bitlos js inject to support https