/file post requires user to be logged in