authorization required

User can not upload/delete/watch photos while not authorized. Every
uploaded photo has its owner now.