Import font CSS using https to fix mixed content warning

Using the protocol-relative "//fonts..." form breaks when running from the local filesystem, so use "https://fonts..." since it still works without mixed content warnings when accessing index.html over http.