bug fix (web):  user.profilepic needs to be user.profilepicUrl