Use protocol relative URL

Otherwise this will fail to load due to insecure content in most browsers by default.