fixes #7907 - Allow images from gravatar on secure headers