update default avatar
fix avatar upload, change image path to /attached/users/$uid