load js over https