Use the protocol-relative url for the fonts

so we don't produce a warning or error when loaded from https