Change iframe url to https

... so it can be loaded over proxies that only allow wss://

@allisoncorey, would you mind reviewing this for me?