Put pictures behind auth