Avoid http / https mixed content warnings / errors

When you lock down a site with nice TLS and suddenly things
don't work, that's unhappiness. "//" urls work nicely to support
testing in both http and https mode.

Signed-off-by: Dan Scott <dscott@laurentian.ca>