load external resources over https so they'll work on dropbox demo