use CDN for leaflet

at least until Leaflet/Leaflet#1903 is fixed