load fonts over both http and https