uses patch for avatar upload