making url to fonts secure