changed authentication mode and user roles for access to the `/media` directory
Release 0.28