Secure /uploads file

Yeah, we have RBAC but we can’t connect our auth guard to it