Support anonymous user having security rights
Better handling of no avatar