fonts.google.com should not be hard-coded to be served from http