Added protocol check to avoid localStorage split

As mentioned in #8, localStorage adheres to a strict same-origin policy and since the button script is embedded with https the settings page should be forced to use https as well to ensure that the button and the settings page work with the same localStorage - this pull request adds a check for protocol and a redirect if it isn't correct