Allow usage via HTTPS

This makes the JS loading http/https agnostic.