authentication, grabs photos from posts