[chore]add authorization for photo show and download action
Merge pull request #70 from peterzd/photo_show_authorize

[chore]add authorization for photo show and download action