DRY up users controller
make gravatars secure