use https:// for CDN links

- works when viewing page via `file://`
- sets a good example security-wise