get scripts and images over https instead of http