fix CSP warnings about gravatar images