better naming, redirect after unauth and photo!