convert urls to https in the loader

otherwise the resource manager was confused as it received the remote
resources list as http urls and after that tried to load https urls