updates src url to use https

helps prevent man in the middle attacks