fix d3 did not like being run on https