For maximum coverage add tests for uploading a profile photo to a bogus username and uploading a photo to a user other than the logged in user.