Set up permissions for update of user photos
Users can only update their own profile