fix to loading external icons over https