check for a password during uploads