Use secure thumbnails when serving HTTPS