add user setting page, allow user to modify email/name/password/avatar