All these external assets are available as SSL

We shouldn't load things via HTTP. Fixes #17
Merge pull request #18 from alphagov/ssl

All these external assets are available as SSL