use https urls - I don't know how this is working but it is