url for avatar now have signature protection.

crmLead.go

@@ -219,5 +219,6 @@ func (m crmdLead) Delete() bool {
 }
 
 func (m crmdLead) avatarCacheURL() string {
-	return CRMConfig.CacheSiteURL + "?a=" + m.AvatarID
+	u := CRMConfig.CacheSiteURL + "?a=" + m.AvatarID
+	return buildSignatureAppend2Url(u, IntraAPIConfig.CRMSecrete)
 }