add image upload func
prevent non-login user to upload image
prevent non-login user to upload image
put image info into db
refactoring
refactoring
add gallery