update latest.js, always uses https by default