user account with functions of change avatar and password