HTTPS for the main font

Moves an `http://` link to `https://` so that it doesn't break in production.