created authorization checking and integrated it with file upload (only students can upload), added the authorization interface