avoid mixed-content issues in the profiler output

loading the css/js over https in an http page has no negative side-effects
but using http in an https page will cause some browsers to not load the
assets due to mixed-content restrictions