using protocol-relative URL to resolve HTTPS issues