user setting : change password
user setting : change avatar