js vendors using https