change CDN to HTTPS