upload file tied to current login