Basic no-security file upload to a tempfile.