use multipart middleware for /api/me/setAvatar