https favicons (fix mixed content warning)