Function authorize_upload 

pub(crate) fn authorize_upload<'a>(
    state: &AppState,
    writer: &'a Writer,
    mime_type: &str,
) -> Result<Authorized<'a>, ApiError>

Checks one upload against the scope of the token that presented it, and writes a refusal down the way authorize_write does.