In MetadataWriter, it is possible that several CommitJobs for one photo are scheduled. If that happens, the callback will crash. This commit fixes this, by only allowing one job per photo. Canceled jobs are now kept in a separate list.