Upload box expands to max-height, scrollable y-overflow, fixed header