albums are in control over the access not the images
- tags can be removed
- album no longer can change user
made the albums notifications overridable rather than calling
object_notifications() directly