finish updating users
make gravatars secure
eliminate an unnecessary assignment