Use relative http[s] protocol for SSL deployment
Add Twitter Content Security Policy meta tag
Replace leaflet js/css libraries with SSL-compatible ones