added css file, added upload avatar file, revised the files to restrict non-login users to access some pages