prefer https profile images to http, and style tweaks