Rails 4 seem to allow setting the id through supplied parameters
The controllers ported to strong_parameters should guard against
attacks over this vector, but I didn't want to remove the specs
that test this here

See https://coderwall.com/p/45ombq

Dried up authorIsCurrentUser in views.js

removed authorIsCurrentUser, now called from views.js

remove authorIsCurrentUser from views.js

Added delete label to photos in gallery

added an event to delete photos of current user

Added css for hiding/revealing the delete label

Included the photo stylesheet

Added cucumber test for deleting your own photos

Removed wip

And make use of that in HelpView

If enabled, terms of service link will be shown in sign up page.

Services have been added to /statistics.json

tidying up

edits

Load the default locale and fall back to it on missing key
and interpolation errors