update javascript to load via https