changed zxcvbn-async to use protocol-relative url

looks like the dropbox url works with both http and https, so using a protocol-relative url will work when the site runs either http or https.