about.ejs: correcting http scripts to https for chrome