Always use HTTPs for the jsapi

Hello,

The problem with using `request.scheme` is that Rails doesn't properly detect if HTTPS is used by the end-user behind a load balancer (HTTPs served by the load balancer, and behind that nginx + rails use HTTP).

I think we should just use HTTPS, the performance hit is not that big and the web is moving foward more security.