returns avatar for /profile

fixes #49 

@rfk r?
sure, or rather `uid()`. i was just trying to clean up names since before it was passing tokens for userids and vice versa, and I don't know how any of it worked, and what is programming.