feat: user avatar uploading