Use https for fetching the avatar.