Display an alert when trying to annotate from a https website

Browsers rightfully prevent scripts to be injected in https-served documents from non-https sources.
This can be solved by installing the mediathread server on a https-enabled site, but in the basic case, it should not silently fail because it is confusing for the users.