require user to confirm photo
image uploads work