fix insecure stylesheet request to address mixed content detected by Chrome