allow remote url photo uploads