staff can always upload a file

Ensures that `staff` can always upload a file (even when they've got a trust level of `0`).

This eases the process of adding a logo to a newly installed instance (uploading the logo will be as easy as drag-and-droping the logo to the composer)