Avoid mixed content when cgiurl is https but url is not