image should be available to stripe checkout. fonts should load without insecure content warning