fix problem where other users would be able to change others avatars