added a 'secure' upload