Hmmm... jax.js should be always invoked via HTTPS