use https for cdn assets