fix loading js over https