fix(avatars): redirect unverified users to confirm screen

If an unverified user visits the avatar page we tell them to confirm and resend the email.

@shane-tomlinson r?

Fixes #1662.
That's a far better solution than I was proposing with far less chance of unintentional screwup.