Updated api to include file uploads. Set all api views to use permissions.IsAuthenticated.