Downgrade Pillow.
Get CSRF token from input.
Might be a good idea to not cache the CSRF token..
Refactor settings, remove unused stuff.
Add "Upload your own image" text to detail page.