product.photo and user.photo to return photo rather than a string