Core::Request* cleanup

in this PR I turned some attributes into 'ro' in both Core::Request and Core::Request::Upload.