Add client-side code so that non-authenticated user can't upload files. Shows message