validate form
save the image directly in s3
secure filename and other small fixes
upload the file with the same extension as src
rename route /upload as /new
clean up