fonts should be loaded via protocol relative url

original usage will cause warning or been blocked if the page was loaded via https