firefox doesn't allow cross domain fonts w/o allow-origin