Use protocol-relative URLs for mosh downloads

Now that there's an SSL certificate, don't force downloads over HTTP,
instead use the same protocol as the user is visiting the site with.