Import font CSS using https to fix mixed content warning

Using the protocol-relative "//fonts..." form breaks when running from
the local filesystem, so use "https://fonts..." since it still works
without mixed content warning when accessing index.html over http.
Merge pull request #66 from edmorley/mixed-content-warnings2

Import font CSS using https to fix mixed content warning