Upload creates MediaFiles, file-url validation