Use Facebook's SSL version of avatar picture (closes #202)