Update _config.yml

http base url will lead main.css load via http protocol, and some browsers may give user warning, cause the page will be redirected to use https protocol, but loading resource via http will make it not safe.