add test for user authorization
add product upload model and controller