#18 store files in a per-case folder and do security checks
 #18 add additional folder in case we upload things besides cases