updated upload path generation to allow file name to remain unchanged but still hide behind uuid-based url