https all the things

Avoid mixed content warnings when running app under a normal web
browser on an https: url by using https for images and ajax
requests, as well as css font references.

Signed-off-by: Jeff Godin <jgodin@tadl.org>