use full path to prevent origin warnings in ssl