Let avatar url be secure if needed
Change allowed version of ckeditor