fixes #1344 add auth exception for pwg.images.uploadAsync

This method handles its own authentication and can be called by an anonymous request. Thus it should not be blocked by a $conf[guest_access] setting set to false.

include/ws_functions.inc.php

@@ -20,7 +20,8 @@ function ws_isInvokeAllowed($res, $methodName, $params)
   }
 
   if ( !is_autorize_status(ACCESS_GUEST) and
-      strpos($methodName,'pwg.session.')!==0 )
+      strpos($methodName,'pwg.session.')!==0 and
+      'pwg.images.uploadAsync'!=$methodName )
   {
     return new PwgError(401, 'Access denied');
   }