load js through https