fix a few small bugs, such as avatar,  login without pw, files sort