add validation to avatar url and allow user to enter custom avatar