upload raw photos to private folder, not public