use https:// for CDN links

- works when viewing page via file://
- sets a good example security-wise