removing avatar upload because it'll require multipart