Make offsite resources play nicely with HTTPS

replaced http:// with // so the URLs respect the current protocol.