adds local references to js resources to avoid multiple protocol errors when users force https