Use protocol relative links for scripts

and use CDN for d3 since the main d3 site doesn't support https.