Swap faces between two photos with optional anonymization