loading the iframe from a non https resource as AWS S3 does not provide us any anyway