[#1002] Make sure https userpics work

* only force https off on journals, not on userpics/cssproxy/etc

* fixed logic for potential redirect so that it only happens if our
  current userpic_root isn't what we expected

* allow https in $LJ::USERPIC_ROOT

Fixes #1002