adjust bookmarklet script src to support http or https