UI: load gravatars over SSL, fixes #173
core.cms: better cache invalidation, fixes #174