Use a different URL for SSL-backed gravatars.

The gravatar docs said we should be using secure.gravatar.com instead of
www.gravatar.com when using SSL, so update our gravatar support to
use that instead.

Tested with the new URL, and saw that it worked fine.