external avatars

Hi, I'm not sure if this is an issue or not, I'm not very security minded, but I thought I'd post it in case it mattered. When using Amazon S3 buckets to host my data and internal_data folders, I noticed that the URL was exposed when clicking (or hovering) on the user's avatar from their...