allow users to upload their profile picture