Handle bad requests for upload creation
Limit the uploads endpoint to 5
Deny access to a locked room's uploads
Deny access to a specific upload within a locked room
DRY up upload access tests
Allow an upload to be fetched after its message is deleted
Create private uploads in locked rooms
Hide private uploads from uploads#index