Update source.threatq.js

Added ability to specify ThreatQ server hostname.
Should this be api.getConfig("threatq", "host", "demo.threatq.com"); so it falls back to demo?  Or will folks always use internal deployment?