Add admin-only upload file interface

Untested.  File upload error case is also still broken.