upload.html for uploading files