image uploads directly to database -- will plumb through to S3 next