move upload.py to action/admin