Avoid mixed content

[BasJ93]

Currently the service worker does not cache any data as it is served using mixed content.

http://flask.pocoo.org/snippets/35/
https://blog.hartwork.org/?p=2655

Currently fixed in production. Back-port the fixes to dev.