static files using http instead of https