When qvitter is enabled disable the content security policy, because otherwise you can't change the profile photo