update user avatar upload ui and api