updated users controller so avatar is not a required field