adds file upload, routing still needs to be updated