Display avatars with https-based URLs

Fixes #72