allow uploaded avatars by default