! CORS was preventing profile avatars from working