Make sure allow_upload is only called on mount

[zkat]

Looks like there's at least one place (CommentBox) where we call allow_upload in an update callback, but that's not right: it should only be happening once, on mount