upload url works
upload file, show its thumnail; needs work