Uploading an avatar for someone else is near impossible, the only way being to log in with their username and password. My idea is that you could use an ID code (like the one twitch use, the stream key). This would allow avatar creators or someone's friend a much easier way of uploading an avatar for someone.