form file upload
add user id to documents
protect file and create document