All these external assets are available as SSL

We shouldn't load things via HTTP. Fixes #17