added user_photos to scope of the login button permissions.