User may see all their pictures

This pull request is relatively small.

The important things to learn from it are:

1. RSpec custom matchers
2. Nested Resources (and controllers)