we may need to make sure that we quote the avatar URL properly à la [this](http://stackoverflow.com/questions/770523/escaping-strings-in-javascript)