Bug fix: serve gsapi javascript from correct scheme

If sonar is running under https, serving gsapi from http
results in the browser blocking the content.