fixed insecure script request for mapbox js cdn