minimum file size upload to 5MB
security fix: view/create/delete only for logged in users