Provides an implementation option for #76
Provides an implementation option for #76

If you disabled unauthorized access to avatar images,
you need to call the avatars-URL with the uid/token
as cookies, not as headers as with the API.

jadolg/rocketchat_API