Change storage directory for uploaded files to be user-specific
FileUpload should know user_id
Secure routes to allowed only; delete some stupid views
Add link to file upload form on homepage