Use protocol-relative uris to prevent mixed content failures.

Firefox blocks mixed active content when the
security.mixed_content.block_active_content
preference is enabled.

Chrome has a similar feature enabled by default.