Major security concerns, widgets are asking for credentials in non secure URLs