Limit image size

[decanus]

We should limit the profile image size, twitter for example recommends that images are 400x400 and can be no larger than 2MB. We should locally resize images to those sizes to ensure they are not larger. And then check on the server that they aren't any bigger than that.