Use protocol-relative URLs for external JavaScripts

Closes #24.