Correcting460 authorization

 * little refactoring of ability file
 * fix file upload button
 * closes #460