update permissions
update /sites route
add quarantining for unparsable uploads