verify user can remove avatar