add test/upload; add 404 page
add photo_img to photo; make images attr_accessible for galleries and photos