add user_photos to the list of requested permissions