Seems that script cant send the refresh reqeust trought from ajax on "protected" pages unless the user belongs to admin security level. Non logged in user can submit a file nicely.
Havent had the chage to investigate further but presume that its missing some necessary request params on the refresh call.
Cheers,
Olli