Secure gravatar

This closes #292 and deals with some of my own concerns as well.

I doubt there will be any difficulties with mandatory activation of https for all Gravatar requests.