Added a hash field to the user table. Populate this with a random value on account creation
Updated the profile photo to use the new user hash, this will prevent people from calculating the urls and displaying the images outside of the system