default loading flex from secure url so it works by default on https connections
add usage instructions