Serve vendor js as both HTTP or HTTPS