Use cookie for avatar upload since header will not exist