security for fileUpload and clean up