serve avatars via the same protocol as the page