Update secure_url to match protocol of current page. Bug 901523.

AJAX requests will error out when being made from HTTP to HTTPS. CSRF protected forms require protocols to match.

Longer term solution (forcing all of mozilla.org to be HTTPS) is in the works. This is a passive patch to immediately fix HTTP to HTTPS errors introduced in PR 928 (https://github.com/mozilla/bedrock/pull/928).