add hasher
update on session label
update user permissions and session
default avatar