tweak path for anonymous https-less checkouts