BUG FIX: user is able to change their email and avatar at profile page