Replace WP_PLUGIN_URL with plugins_url() to prevent mixed content warnings

Editing forms over HTTPS causes a mixed content warning because editor-icon.gif and form-button-1.png are called from plaintext URLS. plugins_url() returns HTTPS paths when required.