Protecting /upload

Well I copied the plugin-upload file into extensions file and modified it there

For my situation It throws 401 error (UnauthorizedError)