Use protocol-relative link to door.sh, to avoid mixed content under SSL