Don't include the user's email in this list
Nicer error handling for the API
Moved respond_to to ApiController and fixed inheritance
Let's only display photos via users#show