better, simpler /photo/xyz REST and photo.jsp

Change-Id: If825c94946ffd8ea54182866fb54daee60bed172