restrict access to AsyncTastController except for from localhost, fixed the path to directory to save uploaded files.