Patch Controller to send headers properly, and fix JS CDN scheme

There is another PR open that just uses // which I think is better.