make requests for profile pictures, update blacklist logic to avoid creating extra objects