disable upload when not a confirmed user