* improved *cough* the default image handling
* changed the way unsecured URLs are defined