add upload avatars & correct user validation