fix insecure font imports on ssl