Fix session key deletion
Upload requires admin authorization
Add is-admin? to context