Insecure sites (not https) blocks API calls for data

Meyer calls its own API pages for data in JavaScript in multiple places, e.g.:
- products
- categories
- blogs, etc...

This fails for non-HTTPS stores, since the request isn't secure.

## Repro
1. Set up product x with Options
1. Hit http://store.com/product-x
2. See options for "product x" are missing

