include avatar url in user serializer