restricting upload pages to logged in users