Fix SSO avatar downloading issues.

Fixes some things I missed (sorry).

* Follow redirects when downloading SSO avatars. — Some servers does redirections (because of caching, whatsnot). A more valid use case are servers that redirects from http to https, which, unfortunately, OpenURI disables no matter what. The solution here is to just have the SSO host serve urls that don't redirect from http to https.

* Add proper image ext. to downloaded SSO avatars.