team page: quiet most of the insecure content warnings by switching gravatars to https