Always load external resources over https since sometimes the app will be running locally over http

resources/frontend_client/index_template.html

@@ -20,7 +20,7 @@
     </body>
 
 
-    <script src="//ajax.googleapis.com/ajax/libs/webfont/1.4.7/webfont.js"></script>
+    <script src="https://ajax.googleapis.com/ajax/libs/webfont/1.4.7/webfont.js"></script>
     <script>
         WebFont.load({
           google: { families: ['Lato:n3,n4,n7'] }
@@ -33,7 +33,7 @@
     (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
     (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
     m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
-    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+    })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');
 
     // if we are not doing tracking then go ahead and disable GA now so we never even track the initial pageview
     const tracking = window.MetabaseBootstrap.anon_tracking_enabled;