uploaded files are now associated with a particular user, as well