Use protocol independent urls

remove `http://` from urls, so that https sites don't complain about loading insecure content