use relative protocol for Google fonts
enforce SSL on /admin paths