We have sorl.thumbnail installed and we load the {% thumbnail %} template tag on lots of pages, but as far as I can tell, we're not actually using it. Let's check that we're not accidentally serving giant images as avatars.