Checking group permissions on the client does not work, since not all groups are serialized to the client all the time. We can check `uploaded_avatars_allowed_groups` on the server side and serialize to the current user instead.
* DEV: upgrade avatar-selector modal * DEV: add system test for avatar selection in account preferences