use protocol-independant URIs for CSS and JS