UploadStash::removeFileNoAuth shouldn't need auth