Don’t use a form

We never want to actually send that, so why should we use a form?
file → filename

filename was originally named file, and it seems I missed one occurrence
when I renamed it.
Fix authentication.

To think this project was blocked for *two days* because I FORGOT A
FRIGGEN AMPERSAND