Fixed setting and getting avatars.

* avatar field in UserSchema now single objectid
* relevant UserSchema methods for avatars now async