Thumbnails should be served over SSL if needed

Mixed content errors = bad