always load css and js sources using the same url as the page that is being visited so there is no http/https mismatch.