Avoid hard-coding http for gravatars

This should fix the warning: "The page at https://zanata... displayed
insecure content from http://www.gravatar.com/avatar/..."