remove REST routes for photos