use protocol agnostic urls for google fonts

if you use solo on an https site (e.g., https://squirt.io), the fonts break!