fix api update_user --> upload avatar