Add client-side image upload to S3
Only allow authenticated users to hit api, wire up template.