Minor IE9 fixes

* changing http to https for iframe/remote files (avoid 'insecure remote content' warning)
* adding html5shiv to IE9