move upload off the package index, add upload form, add basic styling
clean up the upload handler
changes to make auth work.