application controller: add upload functions