Add spec for User.find_first_by_auth_conditions
Move avatar generation to its own method