Require users to upload their photo

This should have been in there, but was overlooked.