xulrunner 28.0 (devel 29.0b1)

* changed http to https
* bumped slimerjs max gecko version to 28.0* so that the default with-xulrunner option will work without editing application.ini (this is a temporary fix until the next slimerjs version is released)