Replace broken avatars with default avatar

This fixes #2208 where I suggested we handle the display of broken avatars by showing something else less broken.

Would be cool if there was a way to reference website.asset_url within JS so I don’t have to resort to the data-default-avatar hack I’ve done here.