setup username
avatar use file. forget pass