using profile_image_url_https as it won't give warnings if your website is under SSL