consider privacy settings for user avatar refs #4

… now using Avatar Class