Ensure non-superusers can't access source code upload page