moved out uploads and users from controllers/admin into their own files