xss security with {{{ }}}
validation added to albums cntroller
added PhotosController
added photos uploader and photos list