file transfer via CGI