fonts are now loaded using HTTPS