Use protocol-less links to resources

This fixes warnings about mixed content when using HTTPS.