Use https API URLs

Now it's possible to embed the dashboard in https pages, such as Thimble makes.