changes to controller, added image, changed correct_user to current user