Same-Origin Policy error when loading token data

This fixes the "No Access-Control-Allow-Origin header" issue without weakening the security of the browser. The getTokenData url was previously rendered as an http url rather than as https.