Clean up /upload routes
Only allow whitelisted origins
Fix spelling in README