move d3 script from hosted to local, not available over https