added avatars, edit profile, and some permission specs