Removed protocol-relative URLs

`secure.assets.tumblr.com` naturally only should be attempted over HTTPS. `static.tumblr.com` throws an SSL error when accessed with HTTPS, but since Tumblr blogs can only be visited over HTTP anyway this isn't as much of an issue.