sign url rewrite & upload via POST
public url handling