Update upload.php

Added another CSRF check for isset() on the key