Fix. upload file
only assign the req.user