adding file upload stuff
messing around with config to not reveal secrets