river5: Doesn't work with HTTPS

the default River layout includes various JavaScript resources via HTTP. These imports fail and throw a mixed-content warning when the river is hosted on HTTPS.

Needless to say, the site is not usable without JavaScript.

Solution would be to either

• move all the front-end dependencies into the river5 repository so they are hosted from the same server as the Node app, or
• enable HTTPS on http://fargo.io/ and http://api.nodestorage.io

I would prefer the former because I don’t see why my River instance needs to depend on external websites. I assume fargo.io and nodestorage.io belong to Dave Winer, but some day he might decide to give the domains up (fargo.io already shows a retirement page).