added uploading functionality

Please make sure you have 755 permission for the images folder and
parent folders. TODO: ajax post to do the uploading async.