Added upload of file thru ajax drag and drop 

- Added secret key generation in create_config
- Uploaded files can be accessed in/uploads/