hacking auth
auth provides the photo (avatar) now