fixed non-admin avatar upload error