why not do it entirely in the browser? sure it might be resource intensive for mobile, but not uploading the image to a server is far more secure.