fix "private:" in UploadController