Explicitly use https for all links

This seems to be the only way to do this, which unfortunately will
result in broken links for non-https-enabled deployments (i.e.,
development), but we can deal with that more easily than broken links
for users.

Fixes assembla-326