fix require_owner_user! filter
forgot validations on x/y_pos for PhotoTagging