restrict uploads for unqualified user, implemented moment.js