dont include the protocol for cdn assets
merge fix-cors into closeio