FIX: add commons-fileupload dependency