use id rather than username for user image paths