bugfix: photo upload