added login required decorator to fileupload(), as typing url /fileupload gave error for anonymous profile due to get_profile()