return 400 when no files are included in POST request for file upload