used HTTP instead of HTTPS, added epxires header for pictures