switched to using React CDN that provides https