switched to protocol-relative urls to fix mixed-content problems