load scripts via https if running secure