Avatar endpoint addition

Created an endpoint that selectively returns avatar data as a base64 encoded object, CORs support was added and can be configured to only allow access from specific domains to specific urls