allow index and show of product to be viewed without authentication
enable proper strong params in product controller
use method product_params
basic uploading works