max height & width value was messed up + all secure urls are now rewritten to unsescure