Use https for all script sources

If a src is http and the html is served on https some browsers will deny
loading of the resource since it's not https.

Change-Id: I279bf5490e667e2db17926e65951723feb911e03