Danny,
Glad that got you going. Hopefully, we can work out the last few points as well.
For Requests/Invites, there is no way around the SSL requirement. When a Request is accepted, Facebook sends them to your Canvas. Even if you use the "Canvas Breakout" setting in our Request configuration area, the user goes to your Canvas first, but then JFBConnect immediately redirects them to your site. They may never see the Canvas, but they do actually go there. The Canvas is important because that's how Facebook sends JFBConnect some information about the user (their FB User ID, the Request ID, etc), and unfortunately, they will only pass that information over SSL for security reasons... hence, the need for the cert. And, again, the reason there's no way around it.
With that said though, SSL certs can be had for as little as $12/year (for multiple years) or $20/year for 1-year. We have a full guide on buying and installing certs that applies to many sites, but your hosting configuration may differ:
Facebook SSL Certificates
The easy-tags that you can use can be found in the Social -> Examples area of the JFBConnect admin section. Additionally, the full configuration guide page can be found:
Facebook Social Plugins for Joomla
Finally, if the avatar from Facebook isn't being imported, check that you've installed and published the JomSocial Profile Plugin. That's in the main zip file you download from here. Once enabled, go to the Profiles configuration area and make sure the Avatar Import option is enabled.
Hope that helps, but if you need anything else, just let us know!
Thanks,
Alex