file_uploads now have authentication