Setting the profile pic via the Custom Avatar URL:
- Giving the encrypted URL (https) removes the avatar after logging out and next login (need to logout of cilogon a.k.a. clear the cookies or use incognito mode)
- Using non TLS URL seems to keep the Avatar image.