cm-user: Don't try downloading empty string avatar URL

This avoids the following critical:

cm-utils[ 4708]:CRITICAL: cm_utils_save_url_to_path_async: assertion 'uri && *uri' failed

Closes: #32 (closed)

haven't tested yet or checked the code flow in detail to see if there are unintended sideeffects