more http only 3rd party assets