set default uploaded photo to private