added security to image uploads, checks to be sure current_user owns the image