make img src work on secur or unsecure