use protocol-less urls for fonts so https works.