set max upload size to 5mb; closes #18