making photos public

hi Tom, not sure if you agree but I think this should be the default for photos. it allows the browser to cache the photos and prevents having S3 create a unique access URL for every request.