Fix remote avatars with https://