url for avatar now have signature protection.

crmLead.go

 }
 
 func (m crmdLead) avatarCacheURL() string {
-	return CRMConfig.CacheSiteURL + "?a=" + m.AvatarID
+	u := CRMConfig.CacheSiteURL + "?a=" + m.AvatarID
+	return buildSignatureAppend2Url(u, IntraAPIConfig.CRMSecrete)
 }