server-side initial upload