Use protocol-relative URL to avoid SSL warnings

Using the `gravatar_url` template tag on SSL generates warnings. Using a protocol-relative URL fixes that (will grab the SSL version when the page is loaded over SSL). Gravatar's official docs say to use https://secure.gravatar.com, but https://www.gravatar.com seems to work fine.