HTTPS and Tab tweaks

A couple small changes:

- I use [HTTPS Everywhere](https://www.eff.org/https-everywhere) and when I first loaded up your example it choked when it tried to load the JS and CSS via insecure HTTP. I switched to CloudFlare's CDN, which supports HTTPS, and "//domain.tld" `link` and `script` tags so that it'll pick whatever protocol the rest of the page is using.
- While I was in your .js file I killed the hard tabs, because hard tabs deserve to die :smile: