Fix possible JS MITM in IE<9

`html5shim` for IE < 9 is requested via http in the default layout template, which in best case results in mixed-content warnings/errors and in the worst case in MITM attack.