well, I think you just put the actual http in the text body of the message. And then the recipient's mail program might or might not automatically make it clickable, depending on their local user configuration settings/preferences. Otherwise they can always copy and paste it the good old fashioned (and much safer!) way, from the message into a browser window.