fixed: fileupload - if acl set so no access, and using ajax upload, then we were still trying to process, also fixed notice regarding undeclared variable