Remove session from uploadFileHander type. The session is not used
anywhere. This completes the set of changes to remove a direct
dependency on rethinkdb from upload.go.