Completed permission model, added file upload ability
revised upload spec in events to reflect image test files