Use https to load external JS

This fixes an annoying problem where browsers generally ignore http javascript on https html