avoid mixed-content issues in the profiler output

loading the css/js over https in an http page has no negative side-effects
but using http in an https page will cause some browsers to not load the
assets due to mixed-content restrictions
Merge pull request #189 from carbin/brought-to-you-by-the-letter-s

avoid mixed-content issues in the profiler output