Hide user avatar in document by default. Ref #30, #42
Refactoring permissions. Allow guests to join session