As @CBroe pointed out, you need to specify you need a secure URL by setting the return_ssl_resources argument to 1: https://graph.facebook.com/wtf.no.username/picture?return_ssl_resources=1.
Edit: Please note that this isn't FQL (Facebook Query Language), this is just a standard API call.