fixed scripts to https, not http