dont set the expire until the file is saved on disk
increase max upload size
security check for stored filenames