Use HTTPS when loading the contact picker javascript

[dangerouse]

using <script src="//..." was a convention to prevent security warnings when loading content from HTTPS on an HTML page that was loaded on HTTP. Browsers used to not like mixed content. Since the internet has evolved beyond this, it's time to make everything HTTPS.