https on output & protect jsbin.user object

If users want to change their settings from the console, they have to use a key to unlock the feature.
Force output to https if enable
Merge pull request #1628 from jsbin/fix/secure-output

Fix/secure output