Admin setting to disable student photo changes

Add an admin control that disables students' ability to change their profile photos, or alternatively an approval workflow in which student photo changes require admin approval or denial before taking effect. Currently there is no way to lock photo edits, so students can update their photos when an organization needs them fixed, and students are uploading unprofessional photos.