path fixes, font over https