fix hledger-web URL (still no https?!)