load script over https