add POST photo (if logged in)