Allow clickabable blow up of auth avatar - and maybe allow user to configure this option, so as not by default