Font can load via http and https
Update slack token
[Server settings] 'X-Frame-Options' should not be 'ALLOWALL'