use cloudflare CDN for Leaflet

(Also update to most recent version of Leaflet.)

This should fix https issues.