FIX: should use "script" to allow cdn