fix bug. exception was thrown on none suffixed avatar request
add content disposition header to avatar response