tiny proof-of-concept for file upload