use HTTPS where appropriate when referencing external sites

* link to Twitter and Google Maps via https:// to prevent users from accidentally using insecure connections

* load external JS via https:// so HTTPS-hosted tweetnest installations are secure.


(it seems I can't submit separate pull requests for ranges of commits, so this includes the whitespace changes. sorry!)