use // instead of http:// for images

This allows us to https version of http version depending on the URL.
Otherwise chrome warns for loading untrusted content.