avoid mixed-content issues in the profiler output

loading the css/js over https in an http page has no negative side-effects
but using http in an https page will cause some browsers to not load the
assets due to mixed-content restrictions

For example: https://viennan.net/profile-1412355279.48924.html (tested with Firefox 32)