Everything is SSL (but delicious and stumbleupon)

As requested by Panzi:
* Removed 'http:' commented-out code
* Updated copyright notice of fbshare.js

Bug fixes:
* build.sh now copies settings.png and socialshareprivacy_*.png
* Changed pinterest image names so that build doesn't skip them.

Other changes:
* Switched all modules but delicious and stumbleupon to SSL.
* Added warning comments to those modules (for what it's worth).
* Added demo/testbuild.html (does what the name says).

Known problems:
* build.sh with `-m all` (default) also includes insecure modules

  TODO: have build.sh include them only if user insists. Maybe
  add --allow-insecure-modules or some other NSA-ish flag ;)

* When activated, pinterest tries to "snitch" to
  http[s]://log.pinterest.com (whether it's http or https is
  determined by current location - not whether pinterest code
  was fetched via http or https).
  The funny thing is that it fails in all cases: http, https, or
  the upstream code at http://panzi.github.io/SocialSharePrivacy/
  Even though it fails, maybe this URL contains some information
  that can help figure out the user.

  TODO: decide whether pinterest should also be considered an
  insecure module.