Fileupload fix

Adding unlockReadOnlyPropertiesOnce() in these places allows authenticated but non-admin users to upload files, assuming that this is the right way to do it.