self-host non-CDN contents

Most of these non-CDN contents are not https, and not trusted.
It's a requirement that all our contents be in https if we want to do
https.