changed scriptUrl to work on https