load assets over https