Tag: restrict access to wp-content/uploads when user is not logged in