Avoid mixed-content warning and only display secure content if serving via https

Oliver Falkrequested to merge
devel into master

Merge request reports