feature: added avatars and md5-passwords