Use paperclip to fullfill the avatar upload feature, however, the known issue is that still cant fix the update attributes without current password