use https for avatars and links to twitter & fb

This fixes issue #147