add avatar change url
edit user without password
add forget password link
add config.yml