user avatar email is stored too (not only md5 ref)