allow https usage of leaflet