expand authentication requirements
add no images message when there are no images