Add hashKey-check for form_field_file

Before it was possible to add any file from uploads-table by simply
setting the uploads id in the hidden input field