fix check for authenticated user
fix the unknown image url to something sensible