added user_photos permission