fix for schemeless embed code
OIDC switched to using https