Update views.py

Protect upload route from unauthorized access.