Fix mixed-content warnings; always use client's protocol

@paulosman I believe this will fix this issue: https://jbuck.ca:4433/soundcloud.html.