deleted user avatar
fixed security for /lists/{id} request
updated pom.xml