Update avatar file permissions

so a webserver's user can access them

Closes #12
Bump