Jdkoola/unify3

added server side filtering to only return pictures that the current user is authorized to view