Media with access control

All the uploaded media is private by default.
Media can be made public during the upload.
Using local disk for storing media is no longer supported.