Replaced hard-coded http protocol in JS lib links

Also updated d3 from 2.9.6 to 2.10.0 (due to availability over public, https-supporting CDN) -- hopefully that doesn't break anything.