added user authentication prior to upload