updates for photo and cross-domain access