serve own leaflet until they can make it available via https