fixing insecure font loading