Fix #852, check for URLs that aren't valid in CSS or have invalid schemes in user avatars.