Upload accepts all file types, no type whitelist