prevent wrong request for avatar