Restriciting access to uploads using noir.session restricted