Strip EXIF metadata from uploaded avatars to avoid leaking private data (#374)