Please check that in the browser using the Developer Console and see the headers. We have x-owners-npub (or something like that) if it is properly authenticated when it was uploaded.