update path used to load web fonts in CSP
[skip ci]