fix: worker autoload now correctly tries https url first