changed leaflet script URLs to https
