allow add files via POST to edit-media URL