controllers/upload: Simplified do()