Added upload of file thru ajax drag and drop

- Added secret key generation in create_config
- Uploaded files can be accessed in/uploads/