Use HTTPS for Facebook avatars