allow different extensions; don't hardcode picture directory, but provide default; use global flickr token; make history file sync every upload; use https; default to private