Separated showing a user's posts/pictures from posts#index, pictures#index
Added code to enfore visibility policy
Added some methods to User; it turns out there's no bug in UsersController