always use HTTPS getting mathjax from CDN

Is there any reason not to do this now?

closes #6246