add upload file and upload.html (need to deal with GAE RO fs)