fixed favourites, homes avatars; fixed auth cookies