Change the script a bit

[no ci]
- Remove blank password line, that was dumb
- Add https:// prefix as an allowed prefix
- Will need to fix spec