changed URL of test avatar
added token authorization