whitelisted the upload in csrf protection
fixed : wzin background is sometimes permanent