Use https protocol to fetch fonts on google

Using protocol-relative URL will be even better, but can't work locally, so I think we can use https here, can also improve the security and prevent the warning on browsers' console.