escape gravatar URLs to comply with W3C standards

This fixes an HTML validation error due to & not being properly escaped on the gravatar URLs.