remove extra db query
make gravatar request secure