Secured activation links
Made character portrait URLs protocol independent