Fix #1434 by rewriting Icon URLs to be protocol independent

Fixes #1434 

This shouldn't affect our vague plan to host the icons ourselves, but it's a small fix to get us to always all-SSL (no more mixed content warnings!)