Login changes and half hearted upload db update (#4).
Require login for image upload (#4).
Add placeholder image.
Add image proxy with access control. Closes #12.