implemented privacy for photos
(users can only see public photos and own photos)