Fix all upload viewable by guest, add test

Uploads with all in reviewer_groups were not viewable by guest users (not logged in). Now they are. Added a regression test.