Change db name.
Make User __init__ less weird.
Be more defensive for avatar url.
Nuke the entire session object when logging out.
Pep8.
Explicitly test against an empty value for username and avatar_url.