Switch call to validator.nu to HTTPS

Just happened, and was causing a CORS problem