fix(avatars): redirect unverified users to confirm screen

If an unverified user visits the avatar page we tell them to confirm and resend the email.

@shane-tomlinson r?

Fixes #1662.
Could we get a functional test for this as well?