fixed routes for posting images and getting user