fixed the script/css urls to allow for loading over https