add photo upload to /photo