Allow www-data to store the files from import-contest

We set the mask explicit to the most loose configuration to prevent
the ACL effectively allowing less than configured.