Use plugins_url() instead of WP_PLUGIN_URL for assets

This ensures that filters are respected, including those that send wp-admin
traffic over https.

Fixes #77

Props @bozicm