- change app.js
- change app.js
- add https to external source