Embedding Hupload in `<iframe>` tags works fine as a guest to publish a share and let people upload files, but not for the admin interface as it looks like the cookies aren't stored. Related conversation : https://stackoverflow.com/questions/2117248/setting-cookie-in-iframe-different-domain