ticket:5 added authorization test which shouldn't pass
ticket:5 added avatar field and Pillow requirement