use media_root for handling picture uploading