user_auth shouldn't know anything about screen shots.