disallow metadata uploads without file uploaded first