allow http/https URLs for include and json