Don't render analytics twice.

It is also rendered inside the `javascript` partial.
Use the appropriate protocol when fetching fonts.
Force SSL in production.