object upload and download, untested, unused