permissions on files controller show
changes store_dir for assets uploader
Uploaded Assets are now strictly served through the FilesController"