fixed permissions issue with image upload