use correct protocol for 3rd party assets

this change allows for jQuery and google font to be requested over whichever protocol the user requests the page from.

in some browsers these 3rd party assets are silently ignored when the page is accessed via HTTPS, while their protocol is HTTP