Use scheme-relevant URI for the font

Elsewise the font doesn't load on HTTPS