Add support for returning secure avatar when secure_image_url is set.

Similar to [omniauth-twitter](https://github.com/arunagw/omniauth-twitter) and [omniauth-facebook](https://github.com/mkdynamic/omniauth-facebook), when `secure_image_url` is set, the secure avatar URL is returned for `picture-url` field.