fix cdn paths to be http only