use https for images and in the dialog

Closes #329