Blocked loading mixed active content (by JQuery)

[Webexplr]

why do all ajax calls on CSWeb use HTTP, while the CSWeb on my server itself is accessed using HTTPS?
How can I force CSWeb ajax to only use https?
This caused "Blocked loading mixed active content" on Firefox, and all ajax cannot be processed, i.e. The users and roles page cannot show all users already on the system, cannot create new.
Screenshot attached

[savy]

In \csweb\src\AppBundle\config.php file, check if API_URL is pointing to your https csweb endpoint and change it. Once you make the changes and save, delete the contents of csweb\var\cache folder.