Write sanitised url into form action to prevent XSS.
Omit scheme from html5shiv script to allow this to work under both http and https.
Merge pull request #409 from noels/ie9_scheme

Ie9 scheme