deleting left over files and improvements in serialisation

- uploaded files get tracked via Wickets FileCleaner
- don't store the file, only the absolute path