Video Player: Disallow users to enter video url's in http.

This PR fixes [BLD-408: Don't allow users to enter video url's in http](https://edx-wiki.atlassian.net/browse/BLD-408).

Additional validation on the frontend and backend sides is added.

@auraz, @valera-rozuvan please review.