use secure domain for bookmarklet