avatars id now is hash of username and timestamp, add edit_user page