upload avatar functionality - not finished