This example Web application isn't really "done right" until it authenticates a user and restricts photo requests based on user credentials and gracefully handl

This example Web application isn't really "done right" until it authenticates a user and restricts photo requests based on user credentials and gracefully handles a large number of user photos (say hundreds of photos, not just ten).