notifications on /upload-signed instead of /upload