Switch to https for API calls & use protocol-less img urls

Now do this correctly this time :smile:

This resolves https://github.com/habari/system/issues/70 in trunk/head