allow users to upload profile pictures