User: attribute profile_picture (nullable) + tested