moved upload stuff into admin

all checked with leon