fix(avatars): redirect unverified users to confirm screen

If an unverified user visits the avatar page we tell them to confirm and resend the email.

@shane-tomlinson r?

Fixes #1662.
I like the idea of using the real client as a base. I'm a little worried about implicitly having all methods return true. I was thinking we might want to be more explicit, and perhaps even have the methods reject with a "please stub" message so we know when a method is being called that we forgot to stub.