Fixed the security issue regarding FB omniauth and avatar issue

Fixed the issue regarding FB omniauth by including variables in an untracked initializer file. 

Also, I incorporated Gravatar so that if a user doesn't sign up with Facebook, we have another means for pulling an avatar for them. If they don't have a gravatar image set we provide a default image.