use https urls for gravatar and tinymce