small tidy up of image uploader;
start of API with basic auth;