http://tools.wmflabs.org/mix-n-match/ doesn't work, it throws a "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tools.wmflabs.org/mix-n-match/overview.json. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing)." . Probably easiest just to move everything over to https with a rewrite rule