consider privacy settings for avatar on profile page refs #4