Fix/299/image upload respects role

The PR is waiting for https://github.com/azavea/OTM2/pull/482 to close. Only the last commit is new.