Use https URLs now that we have a proper certificate.

Mixing HTTP, HTTPS and CORS seems to be producing an exciting array of
strange issues, let's standardize on secure connections across the board.
Merge pull request #33 from mozilla/ssl-urls

Use https URLs now that we have a proper certificate.
Merging despite weird CU failure on the theory that branches are sort of fictional at this early stage anyway.