Goat images need to be served over https