ensure upload controller honours file upload permissions

upload needs:
use Bolt\Translation\Translator as Trans;
use Bolt\Library as Lib