shows users avatar
move user server password validation to client
TODO handle password validation on server as well