add test for uploading document when not logged in