heroku fix - try to find user by session in avatar#create