fixed resource loading over https