Fix some mixed content issues

When serving calagator over https, some fonts and javascript get blocked because http. A couple of these are trivial to fix, at least.