add avatar as attr_accessible