always use https for external css and js

font awesome css loading was broken due to http mixed content issues
since enabling TLS for bddemir.com on cloudflare.  this was bad™.

it's nearly 2015 and now there's no value in using protocol relative
urls (e.g. //example.com/resource). for fonttawesome and google
analytics, simply switch to TLS only.
switch profiles links to to https