Hash image names Send Sam 'user_has_picture' and picture url S3 permissions Pass user object to page always and on login name, major, year, num_matches Upload image at user/ not user/1/ All the email shit