fix images loading over https