update link to cdn to use https