use protocol independent urls for external js