Added handler for force photos
Fixed waiting for async user/group data in doInitPage
Refactored security to use a promise instead

This is a much cleaner way to handle the security bindings and should
provide more stability.  Also needed to handle new async/cached
user/group data.