updated URLS to /download and /upload