removed old auth logic
refactored for new auth
removed comments and white space
Removed extraneous spec file.
add owner permission for 'photos#new'