added file uploads and simple Oauth