authentication by CAS
add same owner condition to overwrite
refactor js for fileupload