changed scripts and styles to use https