Inforce a user login on most API calls
Added comments to the mock code
Added checks to restrict access to certain sets and photos to allowed users only
Corrected the data fetching to only fetch the correct data
Added tests for auth of sets
Added permission tests for photos
Merge branch 'access_control'
Merge branch 'master' of github.com:matto1990/photo_project