load all external scripts via https