shared both upload and update in one request mapping