allows https images as well