Updated Ability class to ensure that only User who uploaded photo can delete it from the database