Update avatar file permissions so a webserver's user can access them

this makes sure another user (i.e a webserver perhaps nginx that would be serving the file) would have read permissions

you might want to do it as an option but this suits my needs