create web api controllers; add image upload