Deployment readiness: Avoid HTTP/HTTPS mixed content and CORS access control warnings

HEADS UP!  Use static_path() rather than static_url() and route_path() rather than route_url() to generate host/port/protocol-independent URLs everywhere for nginx compatibility.

Discovered while working on https://eucalyptus.atlassian.net/browse/GUI-571