Access control infrastructure.

We can have private photos and albums; the photos themselves can still be
accessed throught Apache, but we are working on it.