Avatar upload 

Needs the backend endpoint for full integration test

@perry @maxpeterson 
This should be `type="hidden"` in the docs.