Added permissions to delete avatar - avatars ajaxpage