added simple authorization based on existance of relationship between people, added getting uploaded files support