Upload to uploads_dir, not tmp_dir
Added /static/private/uploads