fix(avatars): integrate the profile images backend

We shouldn't merge this before the dev backend is ready: https://github.com/dannycoates/fxa-dev/issues/24.

Fixes #1556.
Is `token` public? If not, can you add a `_` to be consistent with your other private vars?