update create album template
fix action only accessible when login