Use https for everything

Fitbit will be enforcing HTTPS for all API requests later this year, so this commit is to ensure the gem behaves that way.

All the hard work's been done by @dsjoerg - I've just cherry-picked his commit over to the latest release. Looks like some minor whitespace changes made it through as well, sorry about that (my fault, but small enough I figure it'll be fine).