Avatar enpoint

New endpoint to expose avatars in base64 encoding, enables cors on specified endpoints