Security: Retrieve JSON rather than PHP Gravatar profiles.

Retrieving serialised PHP gravatar profiles is marginally unsafe because a
person in the middle could send a specially crafted PHP object that, when
deserialised, exploits another vulnerability in some magic method. Note that
any successful attack would require another vector, not just Gravatar
profiles. This commit is mainly a defence in depth measure.