As usual the avatars...
Any time you think you have spotted all the places the darn avatars are showed incorrectly, one more pops up. :-\
Confirmed here on Elk. That said, bug squishing within the software aside, perhaps this is also the opportunity to mention another approach. Another means of addressing this is using HSTS. All site connections are forced to https. ;)