Mixed content warnings after enabling SSL

A padlock disappears when a page loads some assets over plain HTTP. Update hard-coded links in the database and templates to protocol-relative or HTTPS URLs.