Use SECURESYNC_PROTOCOL as protocol for CORS request to central server

Was getting a cross-site request error when the CORS AJAX request for language pack metadata was being redirected to https. Here, we set it to make the initial request use the appropriate protocol.