proxy requests to bootswatch api

on ssl enabled sites this would cause internal non-ssl
traffic which yields to browser warnings (#1)