fixed https support (is_secure() is not reliable in some scenarios)

is_secure() doesn't work correctly if you do stuff like SSL termination.
Not specifying the scheme is the standard way of serving files from CDN (see https://developers.google.com/speed/libraries/devguide)