Factor out fake users, use data URIs (fixes #8)