fbshare module (+ https everywere)

fbshare module (share via facebook):
* Has "privacy":"safe" (a simple link).
* demos/fbshare.html shows how it looks in line and box layouts

https everywhere:
All modules now use SSL whether current location is https or not.

It's true that a local adversary (e.g. at the ISP) can learn that
I'm visiting a specific http page, but if I *share* this page via
a social network in *plaintext*, this might help the adversary
deanonymize my social network account :(
Everything is SSL (but delicious and stumbleupon)

As requested by Panzi:
* Removed 'http:' commented-out code
* Updated copyright notice of fbshare.js

Bug fixes:
* build.sh now copies settings.png and socialshareprivacy_*.png
* Changed pinterest image names so that build doesn't skip them.

Other changes:
* Switched all modules but delicious and stumbleupon to SSL.
* Added warning comments to those modules (for what it's worth).
* Added demo/testbuild.html (does what the name says).

Known problems:
* build.sh with `-m all` (default) also includes insecure modules

  TODO: have build.sh include them only if user insists. Maybe
  add --allow-insecure-modules or some other NSA-ish flag ;)

* When activated, pinterest tries to "snitch" to
  http[s]://log.pinterest.com (whether it's http or https is
  determined by current location - not whether pinterest code
  was fetched via http or https).
  The funny thing is that it fails in all cases: http, https, or
  the upstream code at http://panzi.github.io/SocialSharePrivacy/
  Even though it fails, maybe this URL contains some information
  that can help figure out the user.

  TODO: decide whether pinterest should also be considered an
  insecure module.
Merge pull request #30 from thedod/master

fbshare module (+ https everywere)