change FILE_DIR to MEDIA_ROOT
1.0
hide upload and manage files from normal user, allow only faculty and staff, redirect normal user to home page if request to upload or manage files