removed admin check for file upload