Removed upload from authentication requirement