Use a protocol-relative URL

When we load the page over HTTPS, these fonts are blocked because they're
fetched over plain HTTP. This fix will tell the browser to fetch them from
HTTPS instead.