user_id on picture table and a lot of actions now require a user to be logged in