fix loading js library over https