Use https for profile image to avoid mixed content warnings

Required upgrqade to Spring social version