authenticate user to upload photos, automatically save current_user's id