implement basic uploading

support uploading files by POSTing a JSON payload containing filenames
and contents. rename submissions to uploads, since that makes more
sense.