Allow users to configure password outside of an upload URL