Twitter oneboxed content breaking ssl

[riking (Kane York)]

Protocol-independent URLs are incorrect here, it should be HTTPS always - Twitter is in the HSTS preload lists.