fixes bug 910401 - Unathenticated POST for image upload