photo upload sort of works - need to switch perms=read to perms=write in url on auth, still doesn't recognize sets