Dev

change log
- authorization for photo show and download actions