image upload works, but not correlated to user