Use https to gravatar url

It's better to default to https for gravatar urls, otherwise https sites will get a mixed content warning and avatar won't be displayed in most browsers.