Added policy for file upload