change to http post for upload avatar