fixed urls to insecure resources