improved test coverage of adding an asset, where a blank data_url is also present

to catch earlier error when the blank url was being misinterpreted. data_url is now also included as well as the data param, to more closely match what happens from the form