Fix avatar access level check

Show avatar when requested avatar belongs to a user above access
level threshold vs. the logged in user being above the threshold.
When the threshold check fails use the generic avatar to avoid
having entries with and others without avatar pictures.