test: box.upload