rename isAllowedToMe method to isAllowedForAction and added into case for REMOVE_PHOTO action
added for remove_photo case checking to logged and not logged user