fix fonts loading over https