file upload & logging

html escape for comment
logback setting