attempting to allow photo uploads. Looks right, but failing... maybe because of permissions?