Consider switching these links to `//cdn.leafletjs.com/...` so this example can be hosted from a secure site