[gem] add cross_origin
[vendor] add jquery fileupload
enable cross origin requests for uploads
implement a simple front end file uploader