That was just the ticket, thank you MakaryGo 
I think the documentation should be a bit clearer that the second step is required, because what’s the point of specifying the user_id in the first request if the uploaded avatar isn’t automatically assigned to the user?