Use HTTPS for alternate files domain

Now that this works, it's necessary in order for https://phabricator.khanacademy.org/ to serve static files properly (or else you get insecure content warnings).

Auditors: csilvers