Match scheme in URLs (allows https when needed)

This changes assets URLs from 'http://' to '//' meaning they will match the scheme used by `site.url`. These changes allow the theme to be used on sites that go https by default, otherwise browsers will block the javascript for security.

This requires no configuration changes by users and will work the same with or without SSL enabled.