using http/https relative urls for external css/js

fixes loading css/js from external sources, when running as https