check for login before allowing photo upload