[#45] default avatars, ability to change passwords as admin