Use protocol-relative url for gravatar

I think this is better because if a site uses both HTTP and HTTPS than you can't really use `USERENA_MUGSHOT_GRAVATAR_SECURE`.