auth login gets new avatar