Login and user names now work (hopefully)
Uses a filter to protect the upload page