moved leaflet into our css/js directories for SSL
removed http links to stylesheets and use SSL instead
changed link to oabutton.org in twitter and gplus links