fix s3 assets on non-https sites