Switch to locally-hosted profile pic.

This prevents issues with CORS.