Moved upload security to CmfMedia