Tightens up Google Analytics snippet

Forces the initial analytics include to be https (frustrating and useless, since that include then loads another include, which doesn't force https, but a symbolic choice anyway), and uses [Google's anonymize IP flag](https://support.google.com/analytics/answer/2763052?hl=en).

Fixes #124.