Allow public upload together with password protection

fixes #4236 

@butonic @blizzz @schiesbn @icewind1991 @MTGap @MTRichards @karlitschek THX