use cdns wherever possible

* index.html: getting momentjs from cdn & do not enforce http on ajax