Fix: file upload paths