added routes and controller action for creating new photo