fixed so only admins/teachers can upload files