use protocol-relative URL to load resources

browser will tell users that the page contains some insecure resources, use protocol-relative URL can prevent this issue.

reference : [The Protocol-relative URL](http://www.paulirish.com/2010/the-protocol-relative-url/)