added file upload (without relation to files in database)